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Fig. 2 
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Fig.3 
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5/5 

Fig.6 



^^iZP^^o^ -A input -d o/os o/od -j REDIRECT «/od, ARQ, portl, portB^ 

s^rS^^buCipchains -A input -d %s %d -j DENY, ARQ. port2"); 
system(buf); 

PID = forkO; " 
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Fig.« 
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Fig.5 



50 



Connection established 
with first security level 
in first specific interface for the 
request, associated with port3 



51 



Connection established 
with second security level 
in second specific interface for the 
request, to port2 
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(A 



Read first interface 
with first secuirty level 
Write second interface 
with second security level 



Read second interface 
with second security level 
Write first interface 
with first security level 
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Fig.4 
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Request for configuration of an 
application proxy for a server 
application 



40 



Define port2 for connection with 
second security level to server 
application accessed via portl 
with first security level 
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Create listening port3 
for application proxy 
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Order rerouting of any datagram sent 
to portl with the network address 
AR(*) to ports 
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Order deletion of any datagram sent 
to port2 with the network address 
AR(*) 
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Create processing thread 
for this connection request 



